This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
File:                     P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft (raw, json)
Hash identifier:          dPD0OHptUrNiWLhVtTmSfu1DsbVnt+Qq+yKWvGLfj98=
Subject key identifier:   3D:F6:94:50:58:15:9A:25:51:46:BE:EF:05:50:59:74:63:D7:F3:C3
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
Manifest number:          0A5B
Signing time:             Sat 20 Dec 2025 19:24:44 +0000
Manifest this update:     Sat 20 Dec 2025 19:24:44 +0000
Manifest next update:     Sun 04 Jan 2026 19:24:44 +0000
Files and hashes:         1: 3w55Aq5_XhnR6Y9ZlHD5Wkz10Gk.roa (hash: 3+/WhNQ6P++yZG9d1hAWhq42rPOWkPbHwLv8sNj9/+I=)
                          2: 8US7P4mHK_grEZV8AkrPVaEF27M.roa (hash: UaTTU4ho6aHwr/pdfNHnRtBexghHpJ/HHHDfUrmgAl4=)
                          3: I0u5MDE6F4DKPKic_W8-whlIJw0.roa (hash: BOsD8TnNOsusXHnt8vxFUCkTY+49KCZRCWArh/WUsFE=)
                          4: P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl (hash: m+nz9rOnwaZ/6xP5IIyBChPI+YVvy80u4lP1QlGXsIQ=)
                          5: P7xio0KA9JvheLkPt86LjIPBYec.roa (hash: rykWYT1aJFmJwifYoq3qoc6T0JxhaAR2am91Wf0Mf6Q=)
                          6: cPPtPhw2z4LG6OYrDRpgkW_0C-o.roa (hash: dtwettJTfHG1EU6GmD7qDvj7M81or3dZeGj7kB3j4js=)
                          7: iyg50tbe_yk-g7bROurgIxUlr34.roa (hash: frIgahydOSD1un3mp1eCw1ci/Wz40gW8PP2Tvd7PqWY=)
                          8: maL5VrMJiafk1Daw9XXuqSqi_8I.roa (hash: V5Lad3vwUUTiBuzDFnxVn6Es6FKPa8YoyME9Bf4DS2M=)
                          9: pOZ8eAgUlVI_-yL5pSuAtV1JM_k.roa (hash: 1XoX03XXVuCxzJMs8xyhBBCgnQ4SAcjhQljrZrRW1Pc=)
                          10: qh1hcK1IKFMdDa0PIXTMizvTOSI.roa (hash: +ucjTo31G0R+oxxk3rt9nVLGraAquFR++xE1vt9tvSU=)
                          11: vCOr-3jRfUTNBwgYg_kCDxQT1Fw.roa (hash: vve29zVaSc5+pN7xBYH0EHDtf95OmahggV+4O6xTfNg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Dec 15 01:41:01 2025 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=3DF6945058159A255146BEEF0550597463D7F3C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:4f:fe:fa:fe:30:77:63:32:d1:9b:de:bb:
                    92:69:4b:16:53:71:c0:79:26:ec:a8:1f:ca:c9:f6:
                    76:70:62:41:da:2c:7f:64:d4:c0:6a:1d:0d:be:6d:
                    fc:fa:e5:f0:f2:53:cc:11:8e:65:f2:28:17:f0:9a:
                    1b:e2:c8:7a:32:e1:c8:5a:49:ac:a0:6b:73:9a:d8:
                    83:f3:2e:b7:f6:58:53:6f:9e:12:0a:55:e3:1e:19:
                    ba:88:5c:1c:b2:25:1e:f3:45:8f:b4:8a:72:33:44:
                    96:99:5e:77:53:8a:42:69:40:e5:61:f8:3d:cb:54:
                    d4:ab:5e:6c:23:1f:d7:d0:4e:df:00:be:6a:a5:6d:
                    83:ba:7f:70:c2:20:26:10:71:cc:99:02:a3:cc:30:
                    0c:39:81:62:71:cf:f2:3e:bb:f9:03:d9:9a:a8:52:
                    71:7b:4f:7f:8e:ef:79:f3:3d:42:a3:73:4b:26:20:
                    d4:20:91:60:40:8a:02:ff:66:8b:22:31:eb:2b:9d:
                    f8:9d:06:09:d1:e9:c6:ad:f6:db:2d:34:47:c5:b3:
                    b5:7c:9e:3f:ea:14:65:0d:e1:a9:89:6a:bb:1f:4a:
                    4f:9f:9c:f1:a5:6c:bf:6e:09:7a:a7:ff:04:1f:37:
                    77:be:8c:67:68:96:a4:0f:7d:c6:2b:08:4b:e1:db:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F6:94:50:58:15:9A:25:51:46:BE:EF:05:50:59:74:63:D7:F3:C3
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0f:05:8e:25:70:7b:5b:0f:f8:14:0c:6c:7b:59:88:dd:b4:
         40:e5:2c:42:79:24:97:be:30:a1:3c:e1:3f:d3:1c:b4:e1:1c:
         f6:77:65:93:bf:6f:c4:d6:34:74:16:5a:ca:c8:be:8e:0b:32:
         f0:d2:5b:b0:df:e6:06:b5:33:0f:71:0f:c1:17:50:79:a4:39:
         c2:ce:f5:19:c8:b6:78:06:19:df:97:df:3f:9c:fb:1c:77:72:
         cc:6b:98:60:3c:23:90:3d:f9:5c:b2:bd:9d:67:ae:48:bf:0c:
         55:62:55:a8:9a:92:1c:73:f9:3e:89:c1:52:48:33:f3:0f:9c:
         d0:39:71:74:85:4a:c1:34:cb:48:05:a0:44:57:18:98:88:39:
         03:b2:01:ab:fa:d0:3b:21:6b:27:97:f3:90:89:83:64:10:98:
         02:56:04:50:00:d3:92:c5:bf:dc:d0:d2:6d:2a:18:8f:44:24:
         d0:1e:51:ec:e2:5a:ab:ac:26:c5:26:d2:e4:70:52:5a:da:72:
         26:0a:87:ab:9c:90:67:ec:d9:3d:9d:74:91:20:fe:ae:46:0c:
         bc:62:35:26:0d:ea:7d:44:90:f1:99:3f:2e:95:49:ba:59:81:
         54:4b:31:67:20:9b:36:a5:d9:f0:5f:55:90:69:a2:56:f9:69:
         b0:fe:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:24:18 2025 by rpki-client